ill, EXISTING SYSTEMS / PROJECTS 

1, When was the sys'entforofoct developed? 

2. Has the system/project undergone any significant changes since April 1 ?, 2002? 

NO | If no, proceed to next question (11.3 id 

2 1 v 0\e' mdn w o fo S •" the ml owh v changes note m\ o e oourk ;ht 
changes that apply, m\d provide brief explanation for each marked change): 

A conversion from paper-based records to art elec ironic system. 

A change from raformatlon in a formal that is anonymous or non- 

f , N V V O' ' N v O ' * v 

A new use of an IT systenr/prqject, including application of a new 

V O , N V ^ X\ O VS N s ' S ' ~V s 

( For example, a change that would create a snore open environment and/or 
avenue for exposure of data that previously did not exist.) 

A change that results in information in Identifiable form being 
merged, centralized, or matched with miter databases. 

A .new method of atn.hentiea.tiug the use of and access to 
information in identifiable form by members of the public. 

A systematic incorporation of databases onr.rfomtat.km in 
Identi liable form purchased or obtained front commercial or public sources, 

A new interagency use or snared agency function that results in. 
new uses or exchanges of information in identifiable form. 

A change that results in a new use or disclosure of information in 
identiliable form. 

A change that results in new items of information in identifiable 
form being added into the system/pnhect. 
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C hanges do not involve a change in the type of records 
the individuals on whom records arc maintained or the use or 
dissemination of information from the sy.stem/project. 

Other {Provide brief explanation}; 

Does a P1A for this system/project already exist? 

.NO .YES. 

a. Pro vide date/liile of the PI A: 

b. Has the system/project undergone any significant changes since the 

.NO .YES 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(equivalent to the DOJ Initial Privacy Assessment (IPA)) 


NAME OF SYSTEM/PROJECT: HR1 


Derived From: 

SYSTEM/PROJECT POC 

Classified By: 

Name: | J 

Reason: 

Program Office: HRT/GREY Unit 

Declassify On: 

Division: CIRG 


Phone:| j 


Room Number: FBI Academy, QJ 

FBI DIVISION INTERMEDIATE APPROVALS 


Phonej_ 

Room Number: 7458, JEH 


Program Division: CIRG 

FBIHQDivision: CIRG 

Signature:/s 

Signature: /s 

Date signed: 

Date signed: 

Name| j 

Name: James F. Yacone 

Title: Supervisory Special Agent 

Title: Section Chief, Tactical Section 

Signature: 

Signature: 

Date signed: 

Date signed: 

Name: Kenneth R. Gross, Jr. 

Name: 

Title: CIRG SSA\CDC 

Title: 


Program Manager 

(or other appropriate executive 

as Division determines) 

Division Privacy Officer 


After all division approvals, forward signed hard copy plus electronic copy to FBI OGC/PCLU (JEH 7338). 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: 

PIA required: _X_No _Yes: 

Applicable SORN(s): 

Notify FBI RMD/RIDS per MIOG 190.2.3: _No _Yes 

Consult with RMD to identify/resolve any Federal records/electronic records 
Prepare/revise/add Privacy Act (e)(3) statements for related forms? N 


SORN/SORN revision required: 


David C. Larson, Deputy General Counsel 
FBI Privacy and Civil Liberties Officer 


Signature: 

Date Signed: /s/ David C. I 


Unclass ifiedXF^kl^f^ 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OL SYSTEM / PROJECT: 




Hostage Rescue Team (HRT),£ 


b7E 


Upon final FBI approval, FBI OGC/PCLU will distribute as follows: 

1 - Signed original to file 190-HQ-C1321794 (fwd to JEH 1B204 via PA-520) 

Copies (recipients please print/reproduce as needed for Program/Division file(s)): 

1 - DO) Office of Privacy and Civil Liberties (via e-mail to privacyiSoscloi.gov) 1 - OGC\PCLU intranet 

(if classified, via hand deliver to 1331 Penn. Ave. NW, Suite 940,20530) 1 - PCLU UC 

2 - FBI OCIO/OIPP (JEH 9376, attn | | 1 - PCLU Library b6 

1 - FBI SecD/AU (electronic copy: via e-mail to UC | | 1 - PCLU Tickler b7C 

1 - RMD/RMAU (attn j | 

2 - Program Division POC /Privacy Officer 
2 - FBIHQ.Division POC /Privacy Officer 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OL SYSTEM / PROJECT: 


U nclassified\F£rtl|C 


Hostage Rescue Team (HRT) J | b7E 

I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Name of the system/project. Provide current name, any previous or anticipated name changes, and any associated acronyms: 

Hostage Rescue Team (HRT), | | 

2. Briefly describe the system's/project's structure (including identification of any components/subsystems or parent system, if 
applicable): 


Working with ITOD and SecD to determine whether a full scale C&A effort is needed or whether it may fit within another system's C&A. 

3. What is the purpose for the system/project? 


b7E 


4. Please provide a general summary of the nature of information in the system/project and how it will be used: 


5. Does the system/project collect, maintain, or disseminate any information about individuals in identifiable form, i.e., is information 
linked to or linkable to specific individuals (which is the definition of personally identifiable information (Pll))? 

_ NO. Stop. The PTA is now complete and after division approval(s) should be submitted to FBI OGC/PCLU 

forfinal FBI approval. Unless you are otherwise advised, no PIAis required. 

_ YES. Ifyes, please continue. 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OL SYSTEM / PROJECT: 


Undassified\K 


Hostage Rescue Team (HRT)£ 


b7E 


a. Describe the means of accessing the system/project and transmitting information to and from the system/project. 


b. Describe who within the FBI will have access to the information in the system and the controls for ensuring that only 
authorized persons can access the information: 


c. Describe who outside the FBI will have access to the information in the system/project and the controls for ensuring that 
only authorized persons can access the information: 


7. Does the system/project pertain only to government employees, contractors, or consultants? 


NO. 

YES. If yes, provide a brief explanation of the quantity and type of information: 


8. Is information about United States citizens or lawfully admitted permanent resident aliens retrieved from the system/project by name 
or other personal identifier? 

_ NO _ YES 

9. Are Social Security Numbers collected, maintained or disseminated from the system/project? 

_ NO 

_ YES. Thissystemsupportslawenforcementand/orintelligenceactivities. Evety deployment is unique and may 

collect different types of information to support the current mission requirements. 

If yes, for systems/projects other than those supporting law enforcement or intelligence activities: 

- What is the purpose for the collection, maintenance or dissemination of SSNs? 

4 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OL SYSTEM / PROJECT: 


Undassified\F( 


Hostage Rescue Team (HRT)£ 


b7E 


- Is it feasible to eliminateSSNsfrom the system/project (please indicate why or why not)? 

- In light of Federal policy to reduce the use of SSNs, is it feasible to minimize system/project-user access to 
SSNs in the system/project (why or why not)? 

10. Does the system/project collect any information directly from the person who is the subject of the information? 

_ NO 


_YES. This system may be used for any number of reasons due to the fact that each deployment supports a unique 

situation/FBI program. The equipment is deployed to support training, special events, investigations, etc. 

If yes, for systems/projects other than those relating to criminal investigations, CT, or Cl: 

- Indicate how such information is collected: 

- Identify by name and form number any forms used to request such information from the information 

subject (this includes paper or electronic forms): 

- Are information subjects from whom information is directly collected provided a written Privacy Act (e)(3) 

statement (either on the col lection form or via a separate notice)? _Yes _No 

11. Has the system undergone Certification & Accreditation (C&A) by the FBI Security Division 
(SecD)? 


NO. If no, please indicate reason; if C&A is pending, provide anticipated completion 
date: 


YES. If yes, please: 

- Provide date of last C&A certification/re-certification: 


12. Is this system/project the subject of an OMB-300 budget submission? 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OL SYSTEM / PROJECT: 


U nclassified\£&Cfo 


Hostage Rescue Team ( HRT) j | b7E 

_ YES. If yes, if the name of the OMB 300 is not the same as the name of the system/project, please provide 0MB 

13. Is this a national security system (as determined tty theSecD)? 

_NO _ YES _Don't know 

14. Status of System/ Project: 

_ This is a new system/project in development. [Stop. The PTA is now complete and after division approval(s) 

should be submitted to FBI OGC/PCLU for final FBI approval and determination if PIA and/or other actions are 
required.] 

This is an existing system/project. [Continue to Section II.] 

II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17,2003? 

_ NO. If no, proceed to next question (11.3). 

_ YES. lfyes,indicatewhichofthefollowingchangeswereinvolved (mark all boxes that apply): 

_ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non-identifiable to a format that is identifiable to 

particular individuals. 

_ A new use of an IT system/project, including application of a new technology, that changes how information 

in identifiable form is managed. (For example, a change that would create a more open environment 

and/or avenue for exposure of data that previously did not exist.) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OL SYSTEM / PROJECT: 


U nclassified\R)$i^ 


Hostage Rescue Team (HRT), j j b7E 

_ A change that results in information in identifiable form being merged, centralized, or matched with other 

databases. 

_ A new method of authenticating the use of and access to information in identifiable form by members of the 

public. 

_ A systematic incorporation of databases of information in identifiable form purchased or obtained from 

commercial or public sources. 

_ A new interagency use or shared agency function that results in new uses or exchanges of information in 

identifiable form. 

_ A change that results in a new use or disclosure of information in identifiable form. 

_ A change that results in new items of information in identifiable form being added into the system/project. 

_ Changes do not involve a change in the type of records maintained, the individuals on whom records are 

maintained, or the use or dissemination of information from the system/project. 

_ Other. [Please provide brief explanation]: 


b7E 


3. Does a PIA for this system/project already exist? 

NO 


YES. If yes, please provide date/title of the PIA: 


The PTA is now complete and after division approval(s) should be submitted to FBI OGC/PCLU for final FBI approval and 
determination if PIA and/or other actions are required . 
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PIA is. no; required for the following rwwonfoy 

System does not eoikan. oannuain. or diswminate I'll. 

System is. grandfathered (ro exfoencv before b.fo7/2(Kt>: no laser changes r 

_ tuioriWiUon in hut system rehbes to wieinal gevero;ne;rs operation:; 

System has been previously assessed under an evaluation similar to a PI A. 
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L INFORMATION ABOUT 1'IIE SYSTEM / PROJECT' 

1.. Provide a general description of the system or project that includes; (a) name of 
the systetn/projeeh including associated acronyms; (h) strnetnre of the 
sy.stenr'projeet, including interconnections whit other protects or systems; (c) 
purpose of the ss stem/project; hi) nature of the information in the system'project 
and how it will he need; (e) who will have arms to the information in the 
sysiem/projeet; ft) and the manner of transmission to all nsers, 

FBI pohee Management purchased the IDoteet Seventy s v " > v o 

with security measures in the FBI I leadqeartets' Visitor Outer, [ 


2, Toes the system project col loci, maintain, or disseminate any information about 
individuals (le„ a human being or natural person, regardless of nationality)? 


.X YES (If yes. please continued 

~ Please m cat fan ei he on mg eh ^.tonsoes apply o the s m*e tmot 
system thorn eo siduals Bout n mind ha og-e nform lion n y identify or he 
linkable to tut individual 
(Check all that apply.) 

X The efo. union directly < ; ss-* *. divlduals 


ONCI.NKMI'IEO 
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X The anEmnuion is I mended to he used, in eownr tenon with other data element* 
to indocmh identify specific individuals. 

X The iohenmlioo con be used to distinguish or msec an individual's identity ti.o.. n 
is linked or linkable to specific. individuals;. 

If yon marked any of the above, proceed to Question 4, 

None of the above, if norm of the above, desenbe why the Into rotation does not 

4 Does the systenEproject pertain only to goverwnew employees, row rectory or 



N't). |i.f no, skip to question ?J 
X YES. (If yes, proceed to the neat question,] 

subject of tire irdhnniiwvw 

NO flfoo, proceed to question 7.] 

.X YES 

.X NO 

YES flf yes. proceed to question ?.! 

b, .Xre subjects of ahbrrnation iron; whom the Edkonwhon is directly collected 
provided a written Privacy Acr (e)(3) statement (either on the collection form or via a 
separate notice;? 

.NO (The program will need to work oath P€LU to develo p/imp foment 

the necessary !ormts),| 

.X YES identify any forms, paper or electronic, used to .request such 

ltNO...ASXil<-||r|) 
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mho nun'Kin irom dm informmlon 'mdbmd: Pm so \o ton v ' ! 
statements on pemd fa the loo uom where an oflker asks for 
Isformatitm. 

?. Are Social SccifoG Numbers (SSN?) collected. maintained or disseminated from foe 
sysiern/oroiecC Full SSNs should only be used as identifiers. in non led instances. 

NO X NFS If yes, check si! that apply: 







Tho system/protect provides special protection to SSNs te.g.. SSNs are 
encrypted hidden iron; all users via a look-up table, or only available to certain 
risers), Describe: 

n' s i \pl u" ik^ov* eras usvs'S oO'iOJS ' t Ntfomm ra mormel 
o sib m need to hums for their official duties, svi.II have access to she system 
S am! SSNs} at all, 

X No 

b os. Inlotmtuum systems operated by contractors tor the Mil may be 
considered Privacy Act systems of records. The Federal Acquisition Re unladen 
contains standard eor.it.raci clauses that must be included in the event the system 
collects, maintains or disseminates Pit and additions] requirements may be 
imposed as a matter of Department of Justice policy. Consultations nidi the 
dike n r toe General Counsel may be required if a contractor Is operating the 
system tor the FBI. 

Security Division (SocDC 

X NO If no. Indicate reason; if CNN A is pendi.op, preside amldpated 
emopiemm dura G<\ \ oeWm 
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YES if yes, please indicate the followmg, if known: 

Provide date of last v N, \ certi1katlon/r<v««iiifkMirm-: 

Confidentiality: Low Moderate High_Undefined 

Integrity: .Lw Moderate High lOdeftned 

Availability: _Low Moderate High Undefined 


_ YES If yew please provide the date end name or 
kite of the OMB snb.ml.ssnm: 

■ i. Does the system conduct data naming as defined as Section DM of the 

implementing Recommendations of she 9 1 i Commission Act of 2007; p.L. ! 10- 

X NO 

VOX If yes, please describe the data mining fnnetkns: 

12. 0 tins a national sec urn y system (as determined by the Sac DO 
.X.NO .YES 

II. EXISTING SYSTEMS / PROJECTS 


YES if yes, indicate winch of the foil owing changes were involved (mark all 
changes that apply , and provide brief explanation for ends marked change); 
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mciAmmj* 


\ CO 'Xv'!'' . O' WSfC' V' D. ^ 0 0" O .U; OLv 000.0 "S V.O"' 

__ A charge p$$ \% a faunal that k anonymous o; iso a- 

V O * k 0 '?' ' h <' do ' ' '0 S O '" ' s. s \ <• 

A siew use of an IT system/ptoj«a, including application of a now 
technology, that changes how infer.mat.iosi in identifiable form is managed. 

.! 05 e\ ts'jde, a change - oeaki cscute .; mote a sea ost'-isonn'.es'o i o - ■ 
avenue for exposure of' data that tuevioosly did not exist.} 

\ Csaegc t a; s rum r si" > n •'k or 

merged. eetv.rTsee-J, os maio'sed svfi ot ser e.n.'.ks.-cs 

A s'o', method of asithenikaikx the use of and access to 
mtbnoatiosi in identifiable form by members of the pahhc. 

.. \ '-Nv \ v Ox u O '«/' no o >J"'.e. O' 

Identifiable touts purr based or cot fined from commercial or nubile tosoces.. 

Cf, N .. M. ' O vK\ Sv t S St 

O NO N\ lOg-' o' <5 b> S S CO 'c ifi 'k OSO' 

i oh mgd thus Kkalis in a new useds .UNc'uosre - hn|e'rrsnrdc>n. in 
Identsfistbsefomt. 

_ A f ha v.o 'has reiuks in '.sets, '.emu os' sr.iormo.tio. s' oo n nab .. 

fonts being added into the system/prd ect. 

Changes T> * involve a change 1st she type of records nusmtained. 
the individuals on whom records me t s x*. or f use or 
dsssesn matiosi of inf'orssiatkm f*; the -o siersv'projeet. 

Other ffrevkk brief explipMi««|5 

' ■ Does a PC A for this systesn/profeet already exist? 

_NO .YFS 


a, Provide dak/title of the FI A: 
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(OGC/PCLU (Rev. 04/01/20! 1) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 


NAME OF SYSTEM / PROJECT: 

BIKR FBI Unique Asset ID: JUL 


Derived Front: 

Classified By: 

Reason: 

Declassify On; 

SYSTEM/PROJECT POC 

FBI OGC/PCLU POC 

Name! 1 

Program Office: 1TB 

Division: USD 

Phone! ' 

Room Ntimber. 8979 

Name: 

Phone: 

Room Number: Rm 7350 

! .... __...._ 





FBI DIVISION INTERMEDIATE APPROVALS 


Program Manager (or other appropriate 
executive as Division determines)_ 


Signature: ^WzrTz3) 7 

Date s igned: [ 


Division Privacy Officer 


Program Division: CD 


Natner"_ 

Title: MAPA 


T 


FBI HQ Division: 1TSD 


Signature; I 
Date s ignedT 
Name:! 




Title: IT Specialist 


Signature: . . 

Date signed: 

Name | 

Title: SSX 


Signature: [ 


Date s igned: 
Name 


/ n I'lMs' _ 


Title otncfrPr a a/sTtV ^ 
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UNCLASSIFIED // FJ 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: 


_PIA is required by the E-Government Act. 

_PIA is to be completed as a matter of FB1/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions}? _Yes. _No (indicate reason): 

_x_PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate PH. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_Information in the system relates to internal government operations. 

System has been previously assessed under an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

_X Other (describe):_ 


Applicable SORN(s): _JUSTICE/FBI-002 (Central Records System); JUSTICE/FBI-021 (D1VS 

Notify FBI RMD/RIDS per MIOG 190.2.3? _x_No __Yes~See sample EC on PCLU intranet website here: 

http://home/!X)/OGC/LTB/PCLtJ/PrivacyCivil%20Liberties%20Library/formJbr„miogl90-2-3_ec.wpd 


SORN/SORN revision(s) required? __x_No 


Yes (indicate revisions needed): 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? X_No 


_Ye$ (indicate forms affected): 


RECORDS. 'Hie program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 
as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary updates. 


Other: 


Jamej.Jv'Laiidon, Deputy General Counsel and 
FBI Privacy and Civil Liberties Officer 
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b3 

b7E 


2. Does the system/project collect, maintain, or disseminate any information about 
individuals (he,, a human being or natural person, regardless of nationality}? 

_NO 

X YES [If yes, please continue.] 


3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals; Bear m mind that log-on information may identify or be 
linkable to an individual. 

(Check all that apply.) 

X _The information directly identifies specific individuals. 

_ X The information is intended to be used, in conjunction with other data elements, 

to indirectly identify specific individuals. 

_ X The information can be used to distinguish or trace an individual’s identity (i.e., it 

is linked or linkable to specific individuals). 

if you marked any of the above, proceed to Question 4. 

_ None of the above. If none of the above, describe why the information does not 

identify specific individuals either directly or indirectly. 


4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

.X „ NO ..YES 
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5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_NO. (If no, skip to question 7.] 

X _YES. {If yes, proceed to the next question.] 


6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

NO (If no, proceed to question 7.] 

X YES 

a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 

_NO 

_X YES [If yes, proceed to question 7.] 


b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

_NO (The program will need to work with PCLU to develop/implement 

the necessary form(s).] 

_____ YES Identify any forms, paper or electronic, used to request such 
Information from the information subject: 

7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
$ystem/project? Full SSNs should only be used as identifiers in limited instances. 

.NO .X.YES If yes, cheek all that apply: 


X SSNs are necessary to establish/confinn the identity of subjects, victims, 
witnesses or sources in this law enforcement or intelligence activity. 
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UNCLASSIFIED 

_X _SSNs are necessary to identify FBI personnel in this internal 

adm in t strati ve system. 

___SSNs are important for other reasons. Describe; 

.The system/project provides special protection to SSNs (e.g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe; 

X It is not feasible for the system/project to provide special protection to 
SSNs. _ 

b3 

b7E 


8. Is the system operated bv a contractor? 

. X No. 

_Yes. Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in tire event the system 
collects, maintains or disseminates PII and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI Security 
Division (SecD)? 

- NO If no, indicate reason; if C&A is pending, provide anticipated 
completion date: 

X YES If yes, please indicate the following, it‘ known: 

Provide date of last C&A cerfification/re-certifleation: 
04/26/2010 

€ o it fid entiali ty: Low M oderatc X High U a defin etl 

Integrity': _Low Moderate X High ^Undefined 

Availability: _Low Moderate X High Undefined 
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UNCLASSIFIED 

__Not applicable - this system is only paper-based. 

10. Does the system conduct data mining as defined in Section 804 of the Implementing 
Recommendations of the 9/11 Commission Act of 2007, P.L. 110-53 (codified at 42 USC 
2000ee-3)? 

..X.NO 

. YES If yes, please describe the data mining function: 

11.1s this a national security system (as determined by the SecD)? 

_NO X YES 

12. Status o f System/ Project: 

This is a new system/ project in development. 


II. EXISTING SYSTEMS / PROJECTS 
L When was the system/project developed'? 10/1991 

2. Has the system/prpject undergone any significant changes since April 17, 2003? 
■. . NO [If no, proceed to next question (11.3).] 


.X_YES If ves, indicate which of the following changes were involved (mark all 

changes that apply, and provide brief explanation for each marked change): 

. A conversion from paper-based records to an electronic system. 

A change from information in a format that is anonymous or non- 
identiftable to a format that is identifiable to particular individuals. 

_X_A new use of an IT system/project, including application of a new 

technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

. X _ A change that results in information in identifiable form being 

merged, centralized, or matched with other databases. 

__ A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 
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CJM CLASSIFIED 


_. A systematic incorporation of databases of information in 

identifiable form purchased or obtained from commercial or public sources. 

... A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

__ A change that results in a new use or disclosure of information in 

identifiable form. 

A change that results in new items of information in identifiable 
form being added into the system/project. 

_A..... Changes do not involve a change in the type of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

__ Other [Provide brief explanation]: 

3, Does a PIA for this system/project already exist? 

X .NO _YES 


If yes: 


a. Provide date/title of the PIA; 

b. Has the system/project undergone any significant changes since the PIA? 

_NO _YES 
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OGC/PCLU (Rev, Cl/h I TO II) 

FBI PRIVACY THRESHOLD ANALYSIS (FTA) 

S\\u s v \ v N 

Pd\M IGF l w U *w* Ws u> MS o« . P'w_ 


S¥ST EM/PM)3E€T F O€ 

N ame: I I 

Psegn-.m * 'PAv. \ P „ eel hidnOsC 
Pu'OKmhsp1 a a (NIIA > 

Divisi on: Cyber _ 

Phone : l I 

Room 'Number: 


FBI OGC/PCLE FO C 
Name:! 


I Room Number: J£H, Rm ?35(? 


FBI DIVISION INTERMEDIATE APPROVALS 


j Pregiam Managerl'yer other appropriate 

w 'v \s hv ■m 


| Division Privacy Officer 


j FBI HQ Division: 
j Cyber 


I Date si gma: fj 

i Neme: | | 

Title: Soperv-sory Specie] Agent IGA 
I Program. Manager 


! Signature: 


Dele signed 
Name 


1 /zc./: 


| Title: CyD Privacy OsTic; 


After all division approvals.. forward signed hard copy plus e.leemmk copy to FBI OGC/FCLll (J'EM ”35t}< 

(The FBI Privacy and Civil Liberties Officer s demon mnOms. condemns. sod/or food approval will be reeorded oo the 
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HNACFB1 NPPRm M W t *VM>MUVVs 


X FI A is required by the E-Oovernmeot Act. 

FI.4 is to be completed as a matter of 1 : Bl/DOJ discretion, 
s FI A to fee oubhshed on FBI.GOV (alter any RMO FOlA redaciio.es}? X Yes, No : 


PIA is not required lor the following reasoo(s): 

.System does not collect maintain, or disseminate Pit. 

'SvSv' t S„*<vWv' S v s t\ V " ' s s s St' s v S V S s 

_information in (he system relates io internal government operations. 

System has been previously assessed under an. evaluation similar io a PIA. 

No significant privacy issues (or privacy issues are unchanged). 

Other: 


Xopbe rHe FORN.sV IN Y FlN-OCtm.. emmi RecoOs by vgam puhhsheO u tO i cd Reg $«>"* Osh >4 '-m?)as 
K » v CO , OO ,S. M' ' d X v ' ^ v 1 V «' » Lo As. .. ' '• , \ 

Notify FBI RMD/RIDS per MI.OG 190.20? No X Yes-See sample EC on PCLIJ intranet website here: 
nnp ' Imnn DO DOC I SB tV* ' IhnOsW ob'CNq ,Km^s OrR Om,> Vo" \" nmyl'O . ' wpd 

SORN/SORN revistonfs) required? X No Yes 


> Sp$ „v v 1 ' Sv X * s v S 


| RECORDS, The program should consult with RMD to identify/resolve any Federal records/electron 1c records issues, 
j 'The system may contain Federal records whether or riot it contains Privacy Act records and, in any event, a records 

>s v t v < m v SSv* ' >' \ * v H X v. <.v \U S U si * vs t V \Xi N ' vs > W v ' 

ns ssoil as ms sompKSv'ce tsl;h reqmfcmc.'iu tor Mv\tronv Rsoor, <D\nn>s' v eodkomu nnp ,vv ness'ssap, uynuts's 
I Dthet 


] Acting Unit Chief 


Privacy and Civil Liberties Unit 


Signature!_ 

IXac Finned 


' V . v' \v* ^ \> s s s s, N i * v 

v v s * v . v> s v 'o \ N s v 
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L INFORMATION ABOUT THE SYSTEM / PROJECT 


L Provide a general description of the system or project that includes: (a) 
name of the system/project, including associated acronyms; (b) structure of 
the system/project, mdudmg .interconnections with other projects or systems; 
(c) purpose of the system/projeef; (d) nature of the information in the 
system/projeet and how it will he used; (e) who will have access to the 
information in the system/project; (?) and the manner of transmission to ail 
users* 

!<r i u *t' A ! ->0* < ! I t \ m o u < < r - vvr 1 

. "*.e < *\ K s f v ' V \ ! .Cm »' >* 

The information shared is associated with the fall spectrum of potential threats directed 
against the United States. IntraGard as an organisation has existed in a variety of forms 
since the sale 1990's. 

MnfraGard. is organized into regionally based chapters, livery member must be a member 
of a chapter, Bach chapter has an FBI coordinator. The FBI coordinator is an. agent .from 
the local FBi held office. 

The IntraGard Network (IGNs is used to .facilitate the information sharing. The old IGN 
I consists of a web site that is hosted at the Criminal Justice Information Services Division 
(CHS). Due to technical limitations, the old. site must be shut down and migrated to a new 
site by 1 April 2013. The new ION consists of a Public web site and a Private web site. 
The Public web site is hosted at CJIS In a specially protected local area network where 
FBI applications accessible from the Internet are hosted, and is accessible by anyone 
Iron; the Internet.I I 


v O' t ! O . d s. !> v. ! ' ' % V ! V t < o s ft V ' ^ t 

nh l \ •‘•'Kuo \>< v .\' i Ok* v <t v 

identify the applicant for an FBI conducted records check. The application includes a 

>V 0 fo. . * \' . .. t 4 ' ^ ''ft Yt i -•. V. \ 'V . 

1 . ! " . 5 Y S . !S K \ ' , s > K N * .. 

understands the purposes and his/her rights. Once the applicant has tilled out the 
application online and selects submit, the personal information is moved using an 
I encrypted link from the Public server to the Private server where it is stored in encrypted 
I form. The persona! information is deleted from the application and is not maintained on 
the Public site. 

I Once the IGN membership application has been submitted, the application goes through a 
I workflow on the IGN system. Part oft.be wo.rk.fkvw requires t he FBI chapter coordinator 
lor other FBI coordinator at FBI Headquarters to perform a records check and either 
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applicant's Social Security Nun-be? iSSN) for identity. 

) '! \ V V » > " O v \ ' fv\ v \ ' ' V 

server, until needed for periodic revalidation. The .^validation occurs every live years 
and follows a similar workflow as the initial application. 

\Jd? 'O ’ 1 ' ' s ^ s \ ' \ s ' ' ' v,' V C" ! ' 

ffhe pro Ole includes selected PH (but not nSNsk The user car, elec? to share or not share 
’ s "e ow ' » v ev o >o " v . - > ' o ^ s \' ' O' ' e ' , v so - 

S Wl v s ‘ ) - <■ v lOO ' V ' > ' O' N » W 

phone, address, email, and company name. The user profile data is encrypted In motion, 
and at rest. 

> t C ' t S v ^ l O ' t " -V » v. v ' «. 'v 

S v. ' s s » ' S S S 

V K G , " , x S V \ 

approval to share prior to being posted on either the Public or Private site, information for 

i < } » s w < ' v a s a v *' N ^ '0 e Ov » n 

Is presumed to be approved for sharing and is posted to the appropriate web site without 
review, information received from another Government agency (such as DOS or I SA) is 

vN’xd'V'i'x. S . S v. f ^ ' ' S'. 

ihrther FBI review. Once approved for sharing, the information is posted on the site by 

v. m\ v " \ ' s V. ' - id V ^ \ ' V 

' S \ ^ ^ V.' ^ * V X 


o I' M ' \ \ s ' ^ ' s ' \ S ' 'u \ s \K 

u« as,;:-!'),; 


UNCLASSIFIED 

rg 14-06-04-FBI-FOIA-20150417-5th-Production 


EPIC-1049 





Id addition, to information sharing, the IGN Private site provides collaborative tools 
(bulletin boards, blogs) that allow members to interact within IGN. The IGN system 
seeds emails to users alerting them to changes in content of interest on the IGN site. The 
mail system is also nsed for adounistradve purposes such as letting users know to change 
their passwords. E mails generated by a user will include the first line of the message, or 
something similar, I 

| | For example, if a user puts sensitive .information m the Erst 

line, the IGN application will not determine that the information is sensitive and will send 
the email. If discovered, the user eon id be removed limn KIN membership. Sensitive 
in.fonnat.lon is described in the IniraGard Rules of Behavior. 

, ' V \ " s , svs 'Vs' 

The ness IGN sxsmm was designed to ns.ct alt HWE I KT and ENi wenms 
requirements. 

The only PI I that is retained by the system is that associated with membership 
applications. The FI I is stored encrypted. The FI I Is encrypted when in motion between 
systems. The PH Is normally accessible only by FBI chapter coordinators or unit 
personnel conducting membership related records checks. Some Fit that indirectly 
identifies a user is included in the user Profile. Each user individually decides what 
information to sham or not share from widen his/her pro Ido. As with all computer 
systems, privileged users, such as system administrators, can gain access to the 
information. However, access Is monitored for misuse using security audit tools reviewed 

' x \ a \ \ , v \ v ' ' ■- ' v\ 

media in an encrypted form, 

2. floes the system/prolect collect., maintain, or disseminate any information about 
individuals the,, a human being or natural person, regardless of nationality}? 

.NO 


X VIES |lf yes, please eonthiue, \ 

3. Please indicate If any oil the ibiiowing characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identity or be 
linkable to an Individual. 

{Cheek ail that, apply.) 

X Tim .information directly identifies specific individuals. 

.X. The Information is intended to he used. in conjunction with other data elements, 

to indirectly identify specific individuals, 

.X.The information can be used to distinguish or trace art individual's identity (he., it 

is linked or linkable to sped he individuals}. 
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IIyou marked any of the above, proceed to Question: 4, 


Noov of the a box I, It none of die dv%c cose dv vlK the ubmp-mt.on eoes not 
do* h -iwtfic oxh xkksals etther vn * \ ,\ t 

4 , IVe.sd c sx vur ptea'c c'teaoimb st"s s ' 4 w tctpts * 

consultants? 

.X NO .YES 

5. N htfomuttoo ahoid I'obed lutes era vnf or hroihiK aduoued pet n set not test Jett? 
aliens retrieved from the system/project by name or other persona! k\ ftetf 

NO. \ If no, skip to question ?<| 

X hh : ;S. |If yes, proceed to the next question,! 

e >oes d e w sr m n e;eu ,e<.e *' e \n e u\* ^ >n re u sdt) x h, u * t» 
subject of the information? 

_NO (If no, proceed to question ?.} 

.X YES 


a. Does the systeot/prpjca support ehounah <?T. or K l unoxdgations or 
assessments? 

_ \ \P \ u t\ <' o \t, x» x use, x x ' <- e\\^< \ete x o 


Vi'S fit sex, proem! to question " 5 d 


h Are subjects of >> 'We' trout xu-om the u ' dkecbv collected 

pan idee axu.Ucr! xaex \ s ej(f? *tutemut etlvt , < " e ut 

separate amice)? 

..NO {Tfee program w.10 need to work with PC LI.) to ties elopdmpfement 

the necessary fbrmt's.M 

.X YSS Identify any forms, paper or eketronle, used to reunest sued 

Information from the information subject: Potential members are 
provided on (edit statement on the application to become a 
member. 
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7.. X v. ' S V V x "W ' ' 

system/project? 1 -.0! SSNs should only he used as identifiers in limited instances. 

NO X VIS If yes, cheek nil that apply. 


V , 0 , , N v ' S ' v ' \ vv' 'O \ 's' 

witnesses or sources in this law enforcement or Intelligence acdvity. 

SSNs are necessary lo identify hill personnel in this .internal administrative 

X SSNs are Important for other reasons. Describe: SSNs are used by FBI 
personnel to identify InfruGard membership applicants ns port of the 
conduct of a records cheek used in the determlnu tlon of .suitability for 
InfraGard membership. Once a person is approved for membership, SSNs 
ore used again for a records check for periodic re--valldaibm of membership 
suitability that is performed every 5 years, 

v \ 'S , , ' ' , ' O , v \N "S' S' \ 

encrypted, hidden from ail users via a look-up table, or only available to ce.rfal.rt 
users). .Describe:: Use SSNs arc encrypted when in transit or at rest in storage. 
Access to the PH Is managed by roles within the IGN application, The only 
users allowed to access the SSNs ore the FBI ehapfer coordinators or FBI 
National Industry .Partnership Unit tNIFIJ) personnel at FBI Headquarters. 

' O'-'' v ' o ' o, ,e \ ' ,, o 

SWs I xplain- 

8. Is the system operated by a contractor? 

X. No. 

.... Fes. Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The f ederal Acquisition Regulation 
contains standard contract clauses -bat must, be included in the event, the system 
collects, maintains or disseminates PR and additional requirements may be 
imposed as a matter of Department or Justice nodes. Consultations with the 
Office of the General. Counsel may be required if a contractor is operating the 
system lor the FBI. 

v. Has the system undergone Certification At Accreditation (CbFAq by the FBI 
Security Division (SecDC 

NO If no, indicate reason; if G&A is peadmg, provide anticipated 
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ill yes, please indicate the fellowship sfkm>ws: 


X YE S 

Provide dale of last €X A eerfe'less?ioh/re'Cerll!icalk»: 

27 March 21117 

t _Low X Moderate.High Undefined 

integrity; ' X ' 

Availability: Low % Moderate_High.Undefined 

10. Does the system conduct data mining ns denned in. Section K04 of the 
iotplementing RceononendnOons of the D/1 i Commission Act of2007. ILL. 110- 
53 tcodified at 42 DSC 2tHI0ee-3)? 

.X.. NO 

YES IIyea, please describe the data mining function; 

11. is this a national security system (as determined by the Sed> >'? 

.X NO YDS 

12. Status of System/ Project: Operational system that is undergoing transition mi grata 
to a new environment. 

This is a new system/ project in development. 

It EXIaTIXO NYsn-MS PRO.iEt l'8 

1. When was the system/project developed? 'The system has been operating in various 
capacities since 1996. 

.X_YES If yes,, indicate which of the to). I owing changes were involved (mark all 

changes that apply, and provide brief evpfeaatlon for each marked change): 

y 
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A convcrsson from paper-based records to an electronic system. 

A!. ban go from information m a format that is anonymous or non- 
idcntdlable to a format that is identifiable to particular individttals. 

X A ness use of an ft ay stem/pn.sect. including application of a new 
technology, that changes how inhnm.ta.tion in identifiable form in managed 
(For example, a change that would create a more open enviror.tnte.nt and/or 
avenue ter exposure of data that previously did not exist) 

A change that results in information in Identifiable form being 
merged, centralized, or matched with other databases. 

X A new method of authenticating the use of and access to 
information in identifiable form by members of the public, 

A systematic incorporation of databases of Information in 
identifiable form purchased or obtained from commercial or public sources. 

A new interagency use or shared agency function that, results in 
new uses or exchanges ot information in identifiable form. 

A change that results in a new use or disclosure of information in 
identifiable form. 

A change that results in new Items of information in Identifiable 
form being added Into the system/project. 

__ Changes do not In volve a change in the ty pe of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of Information from the system/project. 

Other 1 ftm Ide brief explanation!: 

3, Does a PIA for this system/pnajeet already exist? 

_NO .X.YCS 

lives; 

n date *v he x * ^ w \ ^ ^ ' N * 

b. Has the system/project undergone any significant changes since the PIA? 

.NO Jt.Yfos 


| 

n\et .Ays; Ht n 
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rnv u. FBI APPR OVAL / D E TERMIN ATIONS / CON DITIONS: 


.PI A is to be completed as a matter of FBI/DOJ discretion. 

Y '> X - ' al s v * i t y \ a o 5 'v SXQ s , \ v^v, !"s ' x v % 


N Pi A A not rev uu vP for the .'Row mg reasons). 

.System does not collect. maintain, or disseminate PH. 

.Y^tem is gr&ndlatbered (in exhtcnee hetore 4.-1~ 3M0; no later a<tango- posing significant fuvae> usl-' 

‘ 'k nation in she as cm e ates. to ns.. .er ns \ ope - o 
S> v T » has been e\ ously assessed under a evah < 5 - © P -> 

A Nosug s. 4< - \ v' »s ts^ privacy issues ore nsdasmsed 


-'.rp ; '.vao ! o H N -R\'(s:, T he Cen tral Records S v stem. iu si l ce.Tll-002 

Net.N F?.!p\iDR?Dopu-\lPX^9o:r \ W V C s-^ee sarpfe i C on POU ,co 

N s A < t R v \ PoxacsC’si CYtibert cm Y20i brars/tb miog i 90-2 -3 ec.v. pd 

40R.N YORh revm:on(S; required'? X No Yes 


Prepare, rev>ss. add 00. aey A$t \ e }{ 3) smrernents for related forms? X No _Yes 


j RECORDS. The program shook; consult who HMD to kiemliy/reso.ive any federal reeords/eleeironic records issues. 
The saltern ffi&y contain Federal records whether or not it contains privacy Act requests and. in my event. & records 
o v>. s approved by the National Archives and Records Administration is necessary. R.V-D can provide <o\ ice on this 
as o o as " compliance with regui r etnen ts for Electronic Recordkcepkg Centft catbn and anv necess&rv updates. 

\ e; 


fc .laij. Chief i Signature:; j 

Pro at. v and Civil I .merries Unit . j Date SlgnedL 

v- V\t\ (Vvot C< >sv Signature 
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^FORMATION \B®1 THE SYSTEM / FROJFX1 

L Provide a general description of the sxsiens os- project that includes: tu> ssm of 
dn sv stm/projm, including associated aeconx ns». dp *m*eture of the 
v-stem pieject. mehsdiag Interconnections with os her psvjxehs or §x stems «a> 
purpose of the sxxtcur project; Cd* nature of the Information in the syatcntprojeet 
six! hex It xx III he used; (e> x he will have access to the information in the 
system project; ,f and the manner of tr&asmbobon to all users. 

T ^ uue *,» rm^unx sS, 'g , < s' mex? vh Mi ' 

combat die commercial sexual exploitation of children through prostitution, the 
m ecncc Lost Anurov' > )B1 ;«Uc i chxd or siitut " lot Paso v as ex .ococe c 

record biographical information regarding suspected pimps and victims of prostitution. 
The 1LDB permits the sharing of intelligence by local law enforcement agencies that 
' O' <. civ "Cepc'vc*' > c A'ceX'O aod gat a ee »w, go roe o' ^ xu... V v ^ct v., - 
'' " Aon \xes or Res muss v ‘x \OR N teat '"as n't .^e >o.v u«. ! * .\ 

ndividnafs and argankations Whom Acs were invasligai tg were also I x jived 
criminal acthiiy in other cities. states and regions. Because of he enterprise nature of 
child prosLiiuhoo. certtrauaing the intelligence gathered from local law enforcement has 
facilitated the effective investigation and prosecution of crimes against children that cross 
legal *n I geographic ufssdlvdopal boundaries 


e r,.v c ! cst viatuna s u>u xt- eee on sthreena, *h . O 
which is a secure centreikd-aceess communkadons and information sharing repository 
iCcessibie o :e enforcement users _> password-p; ;ected s .. 




b7E 


I locate information needed lor on- 
go:no mestigatmro snscc on. Ik , a . 1 o < In B s .he sole gerey m 
atunori/e the and users or the Innocence Lost database, in addition, an FBI data, steward 
' vs i sa* w - u v v "> e iD c ^ ts 

Development of the li.DB has ultimately led to the imitation of more effective 
investigations, location of more missing children, and prosecution of more offenders. 

2. Does the sysienvprqiect collect, maintain, or disseminate any mthrmatkm about 
individuals Bo a human being or natural person, regardless of nationality)'? 

.NO 


.X..YES f If yes, please eoaiiune.J 

a. Please indicate it any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identity or be 
linkable to an individual. 

v \fi, . that apply 1 

X_ fbe mlbrmauon difeefly identifies specific individuals. 

, X.The information is .intended to be used, in conjunction with other data elements. 

> tv eed> dent; y specific individuals 

X e I thatidn eanbe sad to distinguish d race an ihdivkh; ' ev> .> ( e 
is linked or linkable to specific individuals). 

If yon marked any of the above, proceed to Question 4, 

None of the above, 1 f none of the above, describe why the in fore union does not 
identity specific indfi vfoals either directly or indirectly 

4, Does the systcm/project pertain only to government employees, contractors, or 
consultants'? 

.X.NO .YES 

b. Is Information about l 'nitect States citizens or lawfoliy admitted permanent resident 
. 'vw m c' w v ", me ossiem on cw -n o: o; e oc^oual dec foe* 

..NO. Ilf no, skip to question 7,1 

_X.YES. jlf yes, proceed to the next question.) 


14-06-04-FBI- 



epic.org 


EPIC-1032 






o, iJoss me sy stern-project collect any information directly front tbs season who is ihs 
subject of the inionnation? 

..NO pf am proceed to question 7,1 

.X.YES It is possible that some ofthe information in the 1LDB will come 

e vet \ ,,o,n law enforcement arcs<• t e\\s o ; Imps or x tchnm e.s osl ?.„•> om oo : m 
advertisements posted by the pimp. 

a. Does the system ''project support criminal (111 or K! investigations or 

.X.YES | If yea, proceed to gimdfoa ?.f 

' forest rejects : o mfa miic riromwhori the nfoohs ion a direct x c& ed 
provided a written Privacy \et (e)(3) statement (either on the collection form or via a 
separate nodoe ? 

_NO | The program will need to work with PCI 1 to develop. Implement 

the necessary :fom(s},| 

YES IdesiMfy any forms, paper or electronic,, nsec to mpeat sraefe 
information from the in forma lion subject: 

1 Are Sectai Security Numbers (SSNs) collected, maintained or disseminated from the 
Yite pr.per ? , SSNs should only be t sed *s demi Iters n 1 muted tsi,ices 

NO X.YES If yes, cheek all that apply: 

..X.SSNs are necessary to esmbhsh/eonlirm the Identity of subjects, victims, 

e nedsos or .sources ' >. - ,s e.u t cement or he igen.ee oc \ s 

S\N,v arc necessary to identify FBI personnel in mis internal aebrmesmuo t 

system.. 

_......... SSNs arc important for other reasons. Describe; 

_ he system/prpject pros des speck protoctiomfo SSNs (e.g>, SSNsare 

encrypted, hidden from all users s. in a tool-up table, or only available to certain 

X % It is net feasible lot the system protect to provide special protection to 

SSNs. Explain: 
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Before indi- iduals are grunted access so the ILDB and the SSKs it 
tains. the> must demonstrate involvement in the 1 westigatkm end or 
prosecution of child prostitution The 1LDB administrators carefully review and 
vet access requests. As a result, individuals with access to the ItDB have 
demonstrated a particular need for thus detailed and sensitive information before 
they are granted access. 

Is the system operated by a contractor? 

__X.No. 

.Yes. Information systems operated by contractors lor the FBI may be 

o siderec Privacy Ac sw ms of .vOio e ew. u s \ on 
contain'. trd contract clauses -ha: must be includes v ^ \ 

C" acts, rt at dams or dissemmates PII and -additions requkenients may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General. Counsel may he required if a comxaetor is oneralins the 
system tor the FBI. 


I'. w me s> stem tmdsrgfme CYrtiikation & Accreditation { C he a). by tire FBI 
Security Division (SecD)? 

...... NO If no, Indicate reason; If C&A Is pending, pros Ida anticipated 

completion date: 

PC YES' If yes, please indkate the following, if known: 

;vcn.cc I ost is Ino uded in EBON € & A, which. expires \h tx h A 12 



Provide da A of last CA \ ecrtllleation/re-eerfllkntlona 
March IS, 2010 

Confidentiality: Low X Moderate High_Ludeflmui 

Integrityt _I ,ow Moderate X High Undefined 

Availability _I no Moderate X High Undefined 

applicable ~ this system is only paper-based 

’•/project the subject of an OMB-.?,00 budget submission? 


If yes, please provide the dike and name or 
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title of the 0MB mhs&hasmx: 


;a:t Docs the system conduct data mining as defined ' Section y) of the 

In.cLn.sr'dng Accomosmnia turns of the o 11 C.-mmN^or \ct of 20d'C P I 
■S3 fe Red a- 421 SC 2000ee 3 

X.NO 

.VES If yes, please describe the data mining function: 

IE. s th v a v,v .&! occur ty oysters (a; detent nod ft : ie SecD 

.X.NO YES 

id. Status of System INqjecl: 

.. This is a new system/ project in development. 


1, EXISTING SYS1EMS/ PROJECTS 

L h ten Mts ® system/p jeef developed? lime 200S 

2. >> he ystem/pfpject undergone any sigmEcaut: changes since Ap 7, 2003? 

_X__. NO [if n.o, proceed to next question (IL.> ■,] 

. V BS If yes. Indicate which of the following changes were involved (mark ail 

changes that apply, and provide brief explanation for each marked change) 

A conversion from paper-based records to an electronic system. 

' e vnui froth Information fo a fonhai that is at: ore. uvns or nor - 
identiRuble to a format that is identl/able to hartknx a, individuals 

......... x , ew use of oo ' I sj stern pro w.,<n< jo fig appllc&ti y& of t o.« 

eevcuogx ,»v;v ^how 'e ' xv t A ,C) e x s e v e 
E'er cvrmele a eh, jvw thur would create e now open em ironment and' 5 
avenue for exposure of data that previously did not exist.) 

' ,,»vVge V, ^ os d s - tv v. >< e , i hr »jg 

A new method of authenticating the use of arid access to 
< v a demifiab lo m r< t s nhers > he p b 
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_ A nesv inters gcnc\' use or shared agency function that results in 

rev- uses < r exchanges of infer mt n n k mi Safe; c Jp. or 

..x sangetrn f es s >ew esc or disclosure nfo. ^ \ 

identifiable form. 

x vbange*mi e^ . s > v\ tens ' 'or _ on do 
form being added into the sysiem/prcieei. 

Changes do not involve a change in the type of records maintained, 
the individuals on whom records are maintained, or the use or 
dissemination of information from the syskmv'project. 

Other I Pros ide brief explanmkop. 

%. Does a PI A for this system/projeet already exist? 

_NO .X.YES 

If yes: 

a. Provide datc/iitie of the PI A: ImaMenee Lost Database, November I& 

20117. 

b. Has the systom/prmect undergone any signifkaiH changes since the PIA ? 
o _ NO \ PS 
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UXAI FBI APPROX \L. l>rTFR>nNATU>\S fONPtUOSA. 


\ M-\ ^ the ,'A' \ X' 

n ' is to K x'emVxxi - 5 mXs X T X- DiX* v wi Si 


is FI.A to be published on FBi.GOV (aiter any HMD FOI.A reductions)? .. U 

suture of thi$ database.: the F.14 update will not be published. 


X No: Due to the 


PIA h sup reus i>. o ' ' the following reasoo(s): 

System \u net oik\ m on a os' bu-e$ xde Fll. 

Xw ' \^v 'sdw'KO > x ' essu" >.' o XX' " oo'v xoix-oon ~ 
Information hi the system relates to internal government operations. 

_System has. been previously assessed under an evaluation similar to a Pi A. 

No significant -privacy issues (or privacy issues are utsohangexl). 

. . Other. 


Applicable $ORN(s). Central Records System. Jusbce/FBldhP.. until such time as a neo SOR N s\;H- hed 
over s he new upgrades. _ 


V x 1 ' d A )\ t D, l . X, \ x n Vo :>k ECbd v 

ho.xo iXHXd * >'B s-Vi < FrsacM. isd''Nh dvo'KAoslol'tvm U i" a obey' 


sOR\ SORN o?vtsvns.O repulse 


No ...X.Yes 


lee odd Privacy .Act (e)(3) statements for related forms? No Yes: 


RECORDS.. The program should consul? with RMD to nlemify/resoive any Federal reeordatelecuronie records Ns; 

\ \ v V. N \ V, \ \ '\s\v \ ' ^ X \ \ \ . 

0 s \ UlUUV ^vV*C * ' >, xx-'' Vw O V ' v v \V vV Ov v'.'.x 

-u; n v s as on compli uK e u do txxmmmiesis tot F Iccnoul c Ik xord kecps ug CoshSca ue -a end .no nvovvsa r c op b .m> 


Other: 


lCuhChRt 

Signature: 
Date Si maxi 


' * 7'. 

Fruao> sndCIUI LtberhexDnu 

1 Brian X mss \eth\e Deploy General Counsel 

IB Privacy id \ is 1 Ovum:; Oftke' 

Signature: (2^ . "• / // , / / 

Das Sugikd s v V 
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L INFORMATION ABOUT THE SYSTEM / FROJECT 

I. Prwkie a general description oftfee system or project $MM Includes: (a) mmt of 
the systern/projeeh ntdoding associated acronyms; (h) structure of the 
system/projeeE including iuferso.roteeflos.tN with other projects' or systems; (e) 
purpose of the sy.sfem/pr«j«el; (d) nature of the halo mm tiers m the sysfem/prejeef 
and Isw if will fee used; (t) who sv.il! hove access to the mform&fio® in the 
sysfem/projectt (!) aotl the master of transmission to all users 

To facilitate the interagestcy shining of Intelligence mtbrma.nw; .necessary to 
combat the commercial sexual exploitation of children through prosnuninn, the 
Innocence I.ost Database tlLDB), a national chad prostitution database, was developed to 
record biographical infcrroatioo regarding suspected pimps and victims of prosti Union. 
The N ^u"o v a e ' ' '\o ' \ $ 4 w esu \" o\ 'that 

previously collected and gathered intelligence on ■prostitution activities within their areas 
of responsibility arid may not have realized that the individuals and organizations whom 
they were irivcadgadng vs ere also involved in criminal activity In ether cities, states and 
regions. Because of the enterprise nature of child prostitution, centralizing the 
intelligence gathered front local law enforcement lots tad lusted the effective 
investigation and prosecution of crimes against children that cross legal and geographic 
jurisdictional boundaries. 


The innocence host database is maintained on Law Enforcement Online (LEO), 
which is a secure controlled-access communications and in.formation sharing repository 
accessible to authorized law enforcement users through a password-protected system. 
LEO operates as a. Sensitive But Undassided network a nd Is certified and accredited 
ttt'idet' the Federal Information Security Management Act, | 


Jibe; 


_ esc da- vices prevent unauthorized access to or reading of data as it 

passes over the links. End users wilt gave varying levels of read/write access hosed on 
their involvement in Innocence Lost Child Pro stunt ton Task forces. 


'NT; L AES! PI EB/EhMuBllA^fA 
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An FBI data steward from the OAO.J is ultimate! v responsible for the database 
and. through oversight, ensures adherence to database rules. These rules provide that end 
users* access is baaed on their role hi the Innocence Lost Child Prostitution Task Pomes 



Development of the H.OB has ultimately Dd to the initiation of mom effective 
mveshgadons, location of too re misstna children, and prosecution of mote offenders. 
The upgrades newt toned above are designed to continue this progress. 


2, Dees the system/project collect maintain., or disseminate any information about 
Individuals fee., a human being or natural person, regardless nf nationality)? 
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X_The information is intended to be used, in conjunction with other data dements, 

X The information can be used to distinguish or mice art individual's identity fiuw 

If yon marked any of the above, proceed to Question 4, 

identify spec i lie individuals either directly or indirectly, 

consultants? 

X NO .YES 


5, is information about United States oilmens or lawfully admitted permanent resident 
aliens retrieved front foe system : pto;ect by name or other personal identifier? 

NO. pf no, skip to question ?.] 

X YUS. pf yes, proceed to the next s|uesdoo>f 

b. Does the system/project collect any information directly from the person who is the 
subject of the ifobnuatton? 

NO Pf no, proceed to question ?>| 

.X.YES infonttatlo.n l | ls likely w have been 

posted by the suspected pimp and may contain his/her phone number or contact 
information. in addition,, it. is possible that some of the information in the ILOB will 
come directly front law enforcement interviews of pimps or victims. 

a. Does the system, project support criminal. C l, or EG investigations or 
assessments? 

.NO 


X.YES Pf yes, proceed to question 7,1 


b.. Are subjects of information front whom the information is directly col lee ted 
separate no ii c e)? 
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NO fTh* program will to work with RCLIi to devolap/implorneni 
the necessary for*tt(s).J 

YES Identify any fonns, paper or ekeirenk, used to request such 


mfor.matkn from the infortnatton $okjeeP 



NO X YES lives* check all that apply: 


X SSNs are necessary to esiahhsibconfirm the idee toy of subjects.. victims. 



SSNs are important tor other reasons. Describe; 


V V sv. ' sW ' s - v 'W \s 

encrypted, hidden .front ail users via a look-up table, or only available to cert a at 
users). Describe: 

.X It la not feasible for the system/project to provide special protection to 

\-*\ |\pGm w ' - «, >.«, v ■, " o s 'sN 

contained within It. they most demonstrate involvement in the investigation and/or 
prosecution of child prostitution. foe ill, DB administrators care folly review and 
vet access requests. As a result, individuals with access to the il.DB have 
demonstrated a particular need tor this detailed and sensitive information before 



.Yes. irboffoalien systems operated by contractors tor the FBI may be 

considered Privacy Act systems of records. The federal Acquisition Regulation 
contains standard contract clauses that must, be included in the event the system 
collects, maintains or disseminates Pi! and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Other of the General Counsel may be required it a contractor is operating the 
system tor the FBL 











\^! v\'v\‘ \ V O V t 0 s KM & \ s V -X \ ' v. v S 

Security Division (SecD>? 

NO If n% tndkate r#M08$ If C&A k pending, provide mikipmvd 

completion date; 

X % S If u'h please indicate lim fnilow ingOC knnn« \ \o osi 
,"v difid jk Kfs Ofi. \ wo t v \ urrcmi' ",tdewemg k>i no 

below m "i\ii ' i$ freon LEON most recent C&.A* 

Provide date of last C.Xt A eerfiftea tloo/re-eerlifkafion % 

Cooildeodality;_Low X Moderate_Htgfe_Undefined 

iMegpttyj _Low Moderate X High Undefined 

AvalMdMfyt _Low ^Moderate Y iLgb I odefioed 

.. N 0 pti 5 V i V N V S. N > N WYf 'i SOvi 

0, Does the system conduct data mining as defined in Section 804 of the 

hnNonanfme S>.u ' yk! <i the o f ! t etwo.vo \ fi. " Dvm v 1fi ! - 
51 o s. ' v M " Wv\~" ' 

.X_ NO 

.YES If yes, please describe tfee data mining fnnctiosK 

1.. h this a national security system (as determined by the Seei>)? 

..... X_. NO .YES 

2. Status of System/ Projeer 

This k a new system/ project in development 

I, r\iN nxo SYSTEMS ' PROJECTS 
, When was the system/prpicct developed? June 2008 

. fptgiho.system proieet undergone any ssgnilkom changes since Xpt- Ifi 2tdh' 
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X YES If yes, radicate which of the following changes wore involved (mark all 
changes that apply, nrsef provide brief zxplsmMitm f&r each marked change}: 


A conversion from paper-based records to an electronic system. 

A change Aron Inthrrnaoon in a format that Is anonymous or now 
identifiable to a format that is identifiable to particular individuals. 

A new use of an IT xystemforpieet, inclodmg application of a new 
web oology, that changes how information in identifiable form Is managed. 
(For example, a change that would create a more open environment and/or 
avenue tor exposure of data that previously did ran. exist.) 

_ A change that results in information ;n identifiable form being 

A new method of authenticating the use of and access to 

A systematic ineorporabon of databases of information in 
identifiable term purchased or obtained from commercial or public sources 

A new inn:regency use or shared agency function that results in 
new uses or exchanges of information in identifiable form. 

A change taut results it: a new use or disclosure of information in 

X A change that results in new items of information in meruit tank 
form being added into the systcan. project. 

Changes do net involve a change m the type of records maintained, 
the individuals on whom records are maintained, or the use or 
dissemination of information from the system, promet. 

Other f fowkfo brief twplnnaifonk 

NO X YFS 



a fo x toe da.e tfoo <o foe f I X '' \\ ' x s eo w \ n s J ' 

b Has the sysieos/profeet undergone any significant changes some the PiAfo 
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